You have a privately addressed email server behind your Firebox. If you want to make sure that all traffic from this server to the Internet appears to come from the public IP address 203.0.113.25, regardless of policies, which from of NAT would you use? (Select one.)
A. In the SMTP policy that handles traffic from the email server, select the option to apply dynamic NAT to all traffic in the policy and set the source IP address 203.0.113.25.
B. Create a global dynamic NAT rule for traffic from the email server and set the source IP address to 203.0.113.25.
C. Create a static NAT action for traffic to the email server, and set the source IP address to 203.0.113.25.
Answer is B for sure.
A: only sends SMTP traffic over that ip, question is all traffic from server
B:is correct
C: SNAT is for incoming traffic
I second your answer. C 100% incorrect as SNAT is for incoming traffic to the external interface.
I think the answer is A.
C is to the server, when the question is FROM the server.
ref:
https://www.watchguard.com/help/configuration-examples/nat_to_email_servers_configuration_example%20(en-US).pdf
end of page 7, beginning of page 8.
correct me if im wrong.
the question stattes “regardless of policies” so A is incorrect
Answer is B